database-maintenance

Pass

Audited by Gen Agent Trust Hub on Oct 31, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is designed for administrative database tasks and explicitly incorporates security principles (OWASP ASI). The following observations support a safe verdict:
  • Identity & Privilege Abuse (ASI03): Instructions mandate the use of least-privilege roles and avoid superuser connections for routine tasks.
  • RCE Guard (ASI05): Core rules require parameterizing maintenance commands to prevent SQL injection or arbitrary command execution.
  • Relational Safety: The skill enforces non-blocking operations using REINDEX CONCURRENTLY and mandatory lock timeouts (SET lock_timeout = '2s') to prevent denial-of-service via lock starvation.
  • Lakehouse Integrity: Maintenance procedures for Apache Iceberg and Delta Lake include safety floors (e.g., 50-snapshot minimum) and grace periods (72-hour vacuum window) to prevent accidental data loss or corruption during cleanup.
  • Tooling: The requested tools are standard for database operations and data management. All documented procedures involve standard database utilities and system calls without suspicious network or file system activities.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 31, 2026, 11:20 AM